This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft File: JBDk0RglFcR982oQAbf2geLc9BQ.mft (raw, json) Hash identifier: Nvv/hNvLwbYMV8fxJPcg/G4d6p46B1IkVMIIY0mz9N8= Subject key identifier: BE:2A:D7:E4:5C:36:28:9A:B9:00:81:90:13:CE:48:0F:56:AD:07:8C Authority key identifier: 24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14 Certificate issuer: /CN=2410e4d1182515c47df36a1001b7f681e2dcf414 Certificate serial: 019AF276D71D6C90209E043ED7D8B27B86CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft Manifest number: 1218 Signing time: Sat 06 Dec 2025 07:01:05 +0000 Manifest this update: Sat 06 Dec 2025 07:01:05 +0000 Manifest next update: Sun 07 Dec 2025 07:01:05 +0000 Files and hashes: 1: As6vwkWGZxruqh4uQQnrE0_5Wkc.roa (hash: +uKniDECqLf36Ns+Ibc2IgSroQKNM4uwIuCwreWx2Qo=) 2: JBDk0RglFcR982oQAbf2geLc9BQ.crl (hash: Aw7I6mZKdLAo+mOB/jhP9RE0pnzi5KGb3Mh6JNEr7m4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9a:f2:76:d7:1d:6c:90:20:9e:04:3e:d7:d8:b2:7b:86:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2410e4d1182515c47df36a1001b7f681e2dcf414 Validity Not Before: Dec 6 07:01:05 2025 GMT Not After : Dec 7 07:01:05 2025 GMT Subject: CN=be2ad7e45c36289ab900819013ce480f56ad078c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b3:f6:39:30:11:2d:ce:d0:4b:65:09:4e:cd: d9:46:f3:a5:e6:c6:ea:13:35:be:81:4c:27:31:bb: e3:53:c5:a8:89:be:44:fe:a8:53:f9:ea:16:80:bf: a6:d2:cd:7b:ce:4d:98:91:85:0f:c8:24:21:32:20: 1e:5c:00:dd:f4:a5:8e:5c:ae:27:2e:4b:9b:20:39: a6:32:3d:3c:64:40:e2:0e:89:ba:f7:e4:5b:ef:64: 15:b2:60:f2:b4:c4:f8:41:ba:8f:04:e3:d6:60:59: 7d:b5:60:9d:1b:71:c8:c8:42:27:18:4b:e8:b1:00: 64:6b:02:a7:98:05:7c:a7:83:e1:a5:39:65:28:d0: 0d:77:7f:cd:23:08:7c:1c:bc:e8:7b:3f:ee:12:38: cc:eb:20:8b:3e:b7:c9:1d:71:c9:4d:01:44:7c:32: 6f:8e:45:21:28:d8:c3:d0:73:cc:15:e3:c5:74:c8: c3:e8:2e:95:13:a9:fa:bb:ab:8e:e6:9b:5f:b1:8f: b3:c8:9d:6d:1b:a6:34:e2:6b:64:f4:a5:cc:58:db: ef:af:be:45:2a:fd:4d:b8:74:a2:4a:fb:ee:18:cf: 74:87:df:ab:77:7d:2b:37:b4:c3:e2:28:2a:fa:ed: 36:c7:77:ff:4e:7e:43:26:09:b6:9f:01:fe:55:b4: 43:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:2A:D7:E4:5C:36:28:9A:B9:00:81:90:13:CE:48:0F:56:AD:07:8C X509v3 Authority Key Identifier: keyid:24:10:E4:D1:18:25:15:C4:7D:F3:6A:10:01:B7:F6:81:E2:DC:F4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBDk0RglFcR982oQAbf2geLc9BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/96a6a8-fb81-4a0f-ab83-a299b022d84e/1/JBDk0RglFcR982oQAbf2geLc9BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d9:c4:34:ac:b1:48:21:5e:52:11:1b:c9:7c:80:ba:b4:1e: c5:c4:89:62:08:09:22:0c:c3:ba:40:26:a1:44:88:ee:b5:15: 87:3f:1b:b8:19:68:d3:a2:38:48:ab:a3:c2:20:d8:11:7f:4d: c5:25:b7:21:ff:38:63:12:3b:cb:22:72:a7:21:4f:74:dc:f2: b5:c2:e1:f0:ef:ce:10:73:2a:8f:38:33:32:04:7b:7b:83:8f: 8e:d7:45:3c:60:09:2a:3e:f3:e5:ef:91:dd:9a:45:47:1f:95: 35:de:17:ce:84:96:3b:bc:d1:d4:1f:2c:42:bb:08:81:e3:06: 2c:89:97:71:b8:f0:9d:85:bf:64:db:cd:dd:e9:6c:ce:e8:30: 38:39:a3:ad:09:d7:56:d1:30:9a:a5:5f:3e:d7:c2:c1:ba:b6: d7:73:fb:48:33:4f:27:38:ed:04:7b:e7:b1:7c:66:ae:36:c2: 62:9d:c2:cc:83:22:77:53:ef:44:7d:ca:51:7a:4b:ea:eb:c0: 9e:34:89:1d:a1:ce:ad:e0:33:f9:b8:36:e7:0b:18:fd:8a:84: ce:c5:23:e3:c4:5b:37:23:c0:13:4f:28:a6:b5:c1:a7:a8:c1: be:06:65:f5:f5:06:4c:d3:57:c1:5d:79:5c:58:18:f0:c8:17: 6b:9f:ee:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZrydtcdbJAgngQ+19iye4bKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0MTBlNGQxMTgyNTE1YzQ3ZGYzNmExMDAxYjdmNjgxZTJk Y2Y0MTQwHhcNMjUxMjA2MDcwMTA1WhcNMjUxMjA3MDcwMTA1WjAzMTEwLwYDVQQD EyhiZTJhZDdlNDVjMzYyODlhYjkwMDgxOTAxM2NlNDgwZjU2YWQwNzhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrP2OTARLc7QS2UJTs3ZRvOl5sbq EzW+gUwnMbvjU8Woib5E/qhT+eoWgL+m0s17zk2YkYUPyCQhMiAeXADd9KWOXK4n LkubIDmmMj08ZEDiDom69+Rb72QVsmDytMT4QbqPBOPWYFl9tWCdG3HIyEInGEvo sQBkawKnmAV8p4PhpTllKNANd3/NIwh8HLzoez/uEjjM6yCLPrfJHXHJTQFEfDJv jkUhKNjD0HPMFePFdMjD6C6VE6n6u6uO5ptfsY+zyJ1tG6Y04mtk9KXMWNvvr75F Kv1NuHSiSvvuGM90h9+rd30rN7TD4igq+u02x3f/Tn5DJgm2nwH+VbRD2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4q1+RcNiiauQCBkBPOSA9WrQeMMB8GA1UdIwQY MBaAFCQQ5NEYJRXEffNqEAG39oHi3PQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85NmE2YTgtZmI4MS00YTBmLWFiODMt YTI5OWIwMjJkODRlLzEvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy85NmE2YTgtZmI4MS00YTBmLWFiODMtYTI5OWIwMjJkODRl LzEvSkJEazBSZ2xGY1I5ODJvUUFiZjJnZUxjOUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdnENKyx SCFeUhEbyXyAurQexcSJYggJIgzDukAmoUSI7rUVhz8buBlo06I4SKujwiDYEX9N xSW3If84YxI7yyJypyFPdNzytcLh8O/OEHMqjzgzMgR7e4OPjtdFPGAJKj7z5e+R 3ZpFRx+VNd4XzoSWO7zR1B8sQrsIgeMGLImXcbjwnYW/ZNvN3elszugwODmjrQnX VtEwmqVfPtfCwbq213P7SDNPJzjtBHvnsXxmrjbCYp3CzIMid1PvRH3KUXpL6uvA njSJHaHOreAz+bg25wsY/YqEzsUj48RbNyPAE08oprXBp6jBvgZl9fUGTNNXwV15 XFgY8MgXa5/uAg== -----END CERTIFICATE-----Generated at Sat Dec 6 13:27:13 2025 by rpki-client